July 2, 2020

Business Tools

On July 1, we released a feature to help give businesses more control over how their data is used in systems and better support them with their California Consumer Privacy Act (CCPA) compliance efforts. You can read more about it in our main documentation.

Server-side API

From July 1 through July 31, 2020, we will return an error message and not use Business Tool data shared via the Server-Side API globally when IP address is not provided, as it limits our ability to determine if uploaded events are personal information about people in California, unless the business sharing the data takes one of the following three actions:

  • The business overrides Limited Data Use via Events Manager for a given event source ID.
  • The business implements the Limited Data Use flag and explicitly specifies country and state after which Limited Data Use will be applied only to personal information shared about people identified through the feature as being in California.
  • The business shares the user’s IP address with Facebook (as described in the developer documentation), after which Limited Data Use will be applied only to personal information about people identified as being in California as determined by the included IP address. During July 2020, sharing the IP address prevents you from receiving the error message and provides a way to determine location so we can apply Limited Data Use for information shared about people in California. Starting August 1, 2020, if you want Facebook to use an IP address for geolocation, you should both provide the IP address and use the LDU flag with parameters to indicate you would like Facebook to use geolocation.

Offline Conversions API

From July 1 through July 31, 2020, we will return an error message and not use Business Tool data shared via the Offline Conversions API globally, unless the business sharing the data takes one of the following two actions:

  • The business overrides Limited Data Use via Events Manager for a given event source ID.
  • The business implements the Limited Data Use flag and explicitly identifies country and state, after which Limited Data Use will be applied only to personal information shared about people identified through the feature as being in California.